Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
File: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft (raw, json)
Hash identifier: H/02dkFpNzdn2WeaTEX8LNuLToC5WIUm3E4QUo5A06A=
Subject key identifier: 46:A3:53:D1:45:02:49:19:F0:8B:E6:CC:6F:93:3F:BF:4C:4D:7A:77
Authority key identifier: 5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
Certificate issuer: /CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Certificate serial: 019D273AD497D43098642D6413E00E2CE879
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
Manifest number: 1785
Signing time: Wed 25 Mar 2026 23:01:00 +0000
Manifest this update: Wed 25 Mar 2026 23:01:00 +0000
Manifest next update: Thu 26 Mar 2026 23:01:00 +0000
Files and hashes: 1: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl (hash: qRJSd+UtWULXd/wN5PHA62ck80UWCTmejIjvUsB1T2g=)
2: kk41E9wK0dMNp3UzVD82jZ-Xu_A.roa (hash: uelRjQS+f/j8WooWIB3/Gzm3JA/8BAj3iz0X2FN7kXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:d4:97:d4:30:98:64:2d:64:13:e0:0e:2c:e8:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Validity
Not Before: Mar 25 23:01:00 2026 GMT
Not After : Mar 26 23:01:00 2026 GMT
Subject: CN=46a353d145024919f08be6cc6f933fbf4c4d7a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:27:9e:ea:d0:49:d3:4b:1e:a4:ec:11:a8:77:
6c:7b:79:cb:64:d6:00:1e:98:d8:31:d3:65:0d:27:
fa:09:7e:39:1e:2a:52:63:33:71:ac:6f:17:4b:59:
8a:82:be:ee:35:86:4f:b4:57:31:9f:29:1d:b7:dd:
f4:40:04:46:16:50:90:5d:5c:32:11:5d:18:52:ef:
d8:af:08:c1:99:a6:a7:59:1e:cb:69:01:88:09:54:
c5:5e:10:26:22:7e:54:e7:da:fd:db:7a:3f:d4:b3:
af:68:13:01:a4:15:07:05:8e:ee:29:ab:78:16:4c:
f9:16:9e:93:18:60:a3:db:85:62:29:c4:98:e4:7b:
be:1e:ce:5c:ac:ad:6b:e9:b9:d2:ee:b9:e2:4b:48:
7d:dc:a1:f2:33:ff:7c:f4:27:98:97:9c:db:92:79:
4f:a3:1e:43:6f:d0:4c:81:c4:e8:1e:27:97:b0:55:
37:a4:2d:e5:7d:4d:77:49:3b:50:9b:c4:da:12:9e:
10:d8:c1:8b:16:cf:bf:ac:c1:3d:87:15:38:07:d4:
f1:f9:37:1d:6a:f3:4f:6a:77:c8:6f:54:85:05:a6:
de:9e:65:22:f9:c6:78:ff:83:b8:0b:06:08:21:80:
b4:29:49:71:9c:3d:f7:78:61:70:1c:07:ee:7f:ed:
46:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A3:53:D1:45:02:49:19:F0:8B:E6:CC:6F:93:3F:BF:4C:4D:7A:77
X509v3 Authority Key Identifier:
keyid:5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:fc:76:29:09:76:1e:2c:db:7c:9e:bc:5b:0d:20:37:b7:bb:
49:f4:56:b5:c7:83:ad:49:98:4a:6a:ad:d4:32:e9:5a:bb:a9:
23:53:ef:74:56:ab:5b:6c:30:3e:e5:3e:33:cc:47:0e:fc:6f:
1f:6c:de:92:ac:4e:64:2b:3e:9e:30:4c:88:72:72:48:40:2b:
7a:83:70:c9:dd:b2:ac:c4:5e:1e:75:23:9f:2b:e1:3e:64:bf:
88:a5:ec:44:cf:2d:21:e1:c4:b4:a5:fa:18:39:8f:d6:6a:bd:
69:d5:61:24:df:59:a9:98:da:3b:c6:b8:49:1f:e2:27:84:d5:
07:c0:59:39:6b:55:e3:c8:48:01:63:72:17:32:60:c5:60:43:
5c:5f:cd:77:3c:b5:ed:e9:ae:d5:9b:4d:61:b2:58:d6:44:2d:
48:29:0a:b2:00:61:d1:e3:63:7f:7e:ce:a3:b0:50:05:38:53:
7c:12:37:33:36:39:d0:7f:4a:5b:cb:55:a7:2d:f9:01:51:c3:
c5:af:08:3e:39:07:eb:69:cd:5a:69:53:78:65:18:be:9d:19:
9e:f9:8b:16:5e:93:74:d9:21:e4:30:ad:64:71:e8:15:95:dc:
96:d6:0f:f9:ed:f7:5f:6b:9b:21:a2:87:d0:c4:0c:d5:d0:f7:
1d:9b:50:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOtSX1DCYZC1kE+AOLOh5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNDJjMzU2MTJmNDVhZjQxMTAzNTIwYWYyNzYxY2RhYTUx
ZTNhYTQwHhcNMjYwMzI1MjMwMTAwWhcNMjYwMzI2MjMwMTAwWjAzMTEwLwYDVQQD
Eyg0NmEzNTNkMTQ1MDI0OTE5ZjA4YmU2Y2M2ZjkzM2ZiZjRjNGQ3YTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5See6tBJ00sepOwRqHdse3nLZNYA
HpjYMdNlDSf6CX45HipSYzNxrG8XS1mKgr7uNYZPtFcxnykdt930QARGFlCQXVwy
EV0YUu/YrwjBmaanWR7LaQGICVTFXhAmIn5U59r923o/1LOvaBMBpBUHBY7uKat4
Fkz5Fp6TGGCj24ViKcSY5Hu+Hs5crK1r6bnS7rniS0h93KHyM/989CeYl5zbknlP
ox5Db9BMgcToHieXsFU3pC3lfU13STtQm8TaEp4Q2MGLFs+/rME9hxU4B9Tx+Tcd
avNPanfIb1SFBabenmUi+cZ4/4O4CwYIIYC0KUlxnD33eGFwHAfuf+1G6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEajU9FFAkkZ8IvmzG+TP79MTXp3MB8GA1UdIwQY
MBaAFF5Cw1YS9Fr0EQNSCvJ2HNqlHjqkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NzQ0OTYtOTdiZC00ZWIwLWE4ODYt
ODIxMTk5NzhkNmJiLzEvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC82NzQ0OTYtOTdiZC00ZWIwLWE4ODYtODIxMTk5NzhkNmJi
LzEvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPx2KQl2
HizbfJ68Ww0gN7e7SfRWtceDrUmYSmqt1DLpWrupI1PvdFarW2wwPuU+M8xHDvxv
H2zekqxOZCs+njBMiHJySEAreoNwyd2yrMReHnUjnyvhPmS/iKXsRM8tIeHEtKX6
GDmP1mq9adVhJN9ZqZjaO8a4SR/iJ4TVB8BZOWtV48hIAWNyFzJgxWBDXF/Ndzy1
7emu1ZtNYbJY1kQtSCkKsgBh0eNjf37Oo7BQBThTfBI3MzY50H9KW8tVpy35AVHD
xa8IPjkH62nNWmlTeGUYvp0ZnvmLFl6TdNkh5DCtZHHoFZXcltYP+e33X2ubIaKH
0MQM1dD3HZtQhw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:00:05 2026 by rpki-client